Unauth Remote Session ID Brute Force Siemens SIPROTEC 5 (V<11.0)
CVE-2024-54017 Published on May 12, 2026

A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V11.0), SIPROTEC 5 6MD86 (CP200) (All versions), SIPROTEC 5 6MD86 (CP300) (All versions >= V7.80 < V11.0), SIPROTEC 5 6MD89 (CP300) (All versions >= V7.80 < V11.0), SIPROTEC 5 6MU85 (CP300) (All versions >= V7.80 < V11.0), SIPROTEC 5 7KE85 (CP200) (All versions), SIPROTEC 5 7KE85 (CP300) (All versions >= V7.80 < V11.0), SIPROTEC 5 7SA82 (CP100) (All versions >= V7.80), SIPROTEC 5 7SA82 (CP150) (All versions < V11.0), SIPROTEC 5 7SA84 (CP200) (All versions), SIPROTEC 5 7SA86 (CP200) (All versions), SIPROTEC 5 7SA86 (CP300) (All versions >= V7.80 < V11.0), SIPROTEC 5 7SA87 (CP200) (All versions), SIPROTEC 5 7SA87 (CP300) (All versions >= V7.80 < V11.0), SIPROTEC 5 7SD82 (CP100) (All versions >= V7.80), SIPROTEC 5 7SD82 (CP150) (All versions < V11.0), SIPROTEC 5 7SD84 (CP200) (All versions), SIPROTEC 5 7SD86 (CP200) (All versions), SIPROTEC 5 7SD86 (CP300) (All versions >= V7.80 < V11.0), SIPROTEC 5 7SD87 (CP200) (All versions), SIPROTEC 5 7SD87 (CP300) (All versions >= V7.80 < V11.0), SIPROTEC 5 7SJ81 (CP100) (All versions >= V7.80), SIPROTEC 5 7SJ81 (CP150) (All versions < V11.0), SIPROTEC 5 7SJ82 (CP100) (All versions >= V7.80), SIPROTEC 5 7SJ82 (CP150) (All versions < V11.0), SIPROTEC 5 7SJ85 (CP200) (All versions), SIPROTEC 5 7SJ85 (CP300) (All versions >= V7.80 < V11.0), SIPROTEC 5 7SJ86 (CP200) (All versions), SIPROTEC 5 7SJ86 (CP300) (All versions >= V7.80 < V11.0), SIPROTEC 5 7SK82 (CP100) (All versions >= V7.80), SIPROTEC 5 7SK82 (CP150) (All versions < V11.0), SIPROTEC 5 7SK85 (CP200) (All versions), SIPROTEC 5 7SK85 (CP300) (All versions >= V7.80 < V11.0), SIPROTEC 5 7SL82 (CP100) (All versions >= V7.80), SIPROTEC 5 7SL82 (CP150) (All versions < V11.0), SIPROTEC 5 7SL86 (CP200) (All versions), SIPROTEC 5 7SL86 (CP300) (All versions >= V7.80 < V11.0), SIPROTEC 5 7SL87 (CP200) (All versions), SIPROTEC 5 7SL87 (CP300) (All versions >= V7.80 < V11.0), SIPROTEC 5 7SS85 (CP200) (All versions), SIPROTEC 5 7SS85 (CP300) (All versions >= V7.80 < V11.0), SIPROTEC 5 7ST85 (CP200) (All versions), SIPROTEC 5 7ST85 (CP300) (All versions >= V7.80 < V11.0), SIPROTEC 5 7ST86 (CP300) (All versions < V11.0), SIPROTEC 5 7SX82 (CP150) (All versions < V11.0), SIPROTEC 5 7SX85 (CP300) (All versions < V11.0), SIPROTEC 5 7SY82 (CP150) (All versions < V11.0), SIPROTEC 5 7UM85 (CP300) (All versions >= V7.80 < V11.0), SIPROTEC 5 7UT82 (CP100) (All versions >= V7.80), SIPROTEC 5 7UT82 (CP150) (All versions < V11.0), SIPROTEC 5 7UT85 (CP200) (All versions), SIPROTEC 5 7UT85 (CP300) (All versions >= V7.80 < V11.0), SIPROTEC 5 7UT86 (CP200) (All versions), SIPROTEC 5 7UT86 (CP300) (All versions >= V7.80 < V11.0), SIPROTEC 5 7UT87 (CP200) (All versions), SIPROTEC 5 7UT87 (CP300) (All versions >= V7.80 < V11.0), SIPROTEC 5 7VE85 (CP300) (All versions >= V7.80 < V11.0), SIPROTEC 5 7VK87 (CP200) (All versions), SIPROTEC 5 7VK87 (CP300) (All versions >= V7.80 < V11.0), SIPROTEC 5 7VU85 (CP300) (All versions < V11.0), SIPROTEC 5 Compact 7SX800 (CP050) (All versions < V11.0). Affected devices do not use sufficiently random values to create session identifiers. This could allow an unauthenticated remote attacker to brute force a session identifier and gain read access to limited information from the web server without authorization.

NVD

Weakness Type

Small Space of Random Values

The number of possible random values is smaller than needed by the product, making it more susceptible to brute force attacks.


Affected Versions

Siemens SIPROTEC 5 6MD84 (CP300): Siemens SIPROTEC 5 6MD85 (CP200): Siemens SIPROTEC 5 6MD85 (CP300): Siemens SIPROTEC 5 6MD86 (CP200): Siemens SIPROTEC 5 6MD86 (CP300): Siemens SIPROTEC 5 6MD89 (CP300): Siemens SIPROTEC 5 6MU85 (CP300): Siemens SIPROTEC 5 7KE85 (CP200): Siemens SIPROTEC 5 7KE85 (CP300): Siemens SIPROTEC 5 7SA82 (CP100): Siemens SIPROTEC 5 7SA82 (CP150): Siemens SIPROTEC 5 7SA84 (CP200): Siemens SIPROTEC 5 7SA86 (CP200): Siemens SIPROTEC 5 7SA86 (CP300): Siemens SIPROTEC 5 7SA87 (CP200): Siemens SIPROTEC 5 7SA87 (CP300): Siemens SIPROTEC 5 7SD82 (CP100): Siemens SIPROTEC 5 7SD82 (CP150): Siemens SIPROTEC 5 7SD84 (CP200): Siemens SIPROTEC 5 7SD86 (CP200): Siemens SIPROTEC 5 7SD86 (CP300): Siemens SIPROTEC 5 7SD87 (CP200): Siemens SIPROTEC 5 7SD87 (CP300): Siemens SIPROTEC 5 7SJ81 (CP100): Siemens SIPROTEC 5 7SJ81 (CP150): Siemens SIPROTEC 5 7SJ82 (CP100): Siemens SIPROTEC 5 7SJ82 (CP150): Siemens SIPROTEC 5 7SJ85 (CP200): Siemens SIPROTEC 5 7SJ85 (CP300): Siemens SIPROTEC 5 7SJ86 (CP200): Siemens SIPROTEC 5 7SJ86 (CP300): Siemens SIPROTEC 5 7SK82 (CP100): Siemens SIPROTEC 5 7SK82 (CP150): Siemens SIPROTEC 5 7SK85 (CP200): Siemens SIPROTEC 5 7SK85 (CP300): Siemens SIPROTEC 5 7SL82 (CP100): Siemens SIPROTEC 5 7SL82 (CP150): Siemens SIPROTEC 5 7SL86 (CP200): Siemens SIPROTEC 5 7SL86 (CP300): Siemens SIPROTEC 5 7SL87 (CP200): Siemens SIPROTEC 5 7SL87 (CP300): Siemens SIPROTEC 5 7SS85 (CP200): Siemens SIPROTEC 5 7SS85 (CP300): Siemens SIPROTEC 5 7ST85 (CP200): Siemens SIPROTEC 5 7ST85 (CP300): Siemens SIPROTEC 5 7ST86 (CP300): Siemens SIPROTEC 5 7SX82 (CP150): Siemens SIPROTEC 5 7SX85 (CP300): Siemens SIPROTEC 5 7SY82 (CP150): Siemens SIPROTEC 5 7UM85 (CP300): Siemens SIPROTEC 5 7UT82 (CP100): Siemens SIPROTEC 5 7UT82 (CP150): Siemens SIPROTEC 5 7UT85 (CP200): Siemens SIPROTEC 5 7UT85 (CP300): Siemens SIPROTEC 5 7UT86 (CP200): Siemens SIPROTEC 5 7UT86 (CP300): Siemens SIPROTEC 5 7UT87 (CP200): Siemens SIPROTEC 5 7UT87 (CP300): Siemens SIPROTEC 5 7VE85 (CP300): Siemens SIPROTEC 5 7VK87 (CP200): Siemens SIPROTEC 5 7VK87 (CP300): Siemens SIPROTEC 5 7VU85 (CP300): Siemens SIPROTEC 5 Compact 7SX800 (CP050):

Exploit Probability

EPSS
0.04%
Percentile
11.63%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.